Symfony

1-Rce

https://medium.com/@bxrowski0x/3-symfony-rce-a-peek-behind-the-curtain-83da5433e149

2- use tool eos

https://github.com/Synacktiv/eos

3- path with sensative data disclosure

/_profiler
/app_dev.php/_profiler
/app_dev.php
/_profiler/empty/search/results?limit=10
/app_dev.php/_profiler/
/app_dev.php/_profiler/phpinfo
/app_dev.php/_profiler/open?file=app/config/parameters.yml
/app/config/config_test.yml
/_fragment
/_internal
/_proxy

4- secret fragment exploit

https://github.com/ambionics/symfony-exploits
http://web.archive.org/web/20230708081739/https://www.ambionics.io/blog/symfony-secret-fragment

5-use nuclie template

https://github.com/Az0x7/vulnerability-Checklist/blob/main/Hacking%20Symfony/template_1.yaml
https://github.com/Az0x7/vulnerability-Checklist/blob/main/Hacking%20Symfony/template_2.yaml
https://github.com/Az0x7/vulnerability-Checklist/blob/main/Hacking%20Symfony/template_3.yaml
https://github.com/Az0x7/vulnerability-Checklist/blob/main/Hacking%20Symfony/template_4.yaml

6- fuzz with

https://github.com/six2dez/OneListForAll/blob/main/dict/symphony_long.txt